CIS AWS v3.0.0: Enforce infrastructure standards with Terraform policies

Description

The Center for Internet Security (CIS) AWS Foundations Benchmark serves as a set of security configuration best practices for AWS. These industry-accepted best practices provide you with clear, step-by-step implementation and assessment procedures. Ranging from operating systems to cloud services and network devices, the controls in this benchmark help you protect the specific systems that your organization uses.

Number of Guardrails

0

Relevant Guardrails

Disallow inbound open access

-->

Disallow public ACLs on S3 buckets

-->

Disallow publicly accessible RDS

-->

Enable CloudTrail log file validation

-->

Enforce strong IAM password policy

-->

Ensure CloudTrail logs are encrypted with KMS

-->

Ensure S3 buckets have Block Public Access enabled

-->

Include global service events in CloudTrail

-->

Require AWS Config to record all resources

-->

Require CloudTrail multi-region trail

-->

Require CloudTrail to send logs to CloudWatch

-->

Require EBS encryption

-->

Require SSE on S3 buckets

-->

Import 0 Guardrails